Splitting primes 



Chandan Singh Dalawat 

We give an elementary introduction, through illustrative examples but without 
proofs, to one of the basic consequences of the Langlands programme, namely the 
law governing the primes modulo which a given irreducible integral polynomial splits 
completely. Some recent results, such as the modularity of elliptic curves over the 
rationals, or the proof of Serre's conjecture by Khare and Wintenberger, are also 
illustrated through examples. 
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Certainly the best times were when I was alone with mathematics, free of 
ambition and pretense, and indifferent to the world. — Robert Langlands. 

HH 

Groups, rings, fields, polynomials, primes, functions : most mathematics 
students at the university have come across these concepts. It so happens 
that one of the basic problems of number theory can be formulated using 
nothing more than these notions; we shall try to explain Langlands' 
conjectural solution to this problem. Everything we say here has been 
said before, but some readers might not have access to the original sources. 
This is the pretext for putting together these observations ; the aim is not 
so much to instruct as to convey the impression that these examples are 
part of a larger pattern. Proofs are altogether omitted. 
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Let us consider a monic polynomial / = T n + c n -iT n ~ 1 + • • - + ciT + cq 
of degree n > with coefficients Ci in the ring Z of rational integers (the 
adjective monic means that the coefficient of T n is 1). Suppose that the 
polynomial / is irreducible : it cannot be written as a product / = gh of 
two polynomials g,h £ Z[T] of degree < n. Basic examples to be kept in 
mind are / = T 2 + lor/ = T 3 — T — 1. (There are irreducible polynomials 
of every possible degree. For example, Selmer showed that T n — T — 1 is 
irreducible for every n > 1.) 

For every number m > 0, we have the finite ring Z/mZ with m elements 
each of which is of the form a for some a £ Z, with the relation a = b if 
m divides a — b; this relation is also written a = b (mod. m), and we say 
that a is the reduction of a modulo m. The group of invertible elements 
of this ring is denoted (Z/mZ) x , so that a £ (Z/mZ) x if and only if 
gcd(a,m) = 1. The order of this group is denoted <p(m). When the integer 
m is a prime number p, the ring Z/pZ is a field denoted F p and the group 
F* is cyclic of order (p(p) = p — 1. 
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For every prime p, the polynomial / G Z[T] gives rise to a degree-n 
polynomial / = T n + c n _iT n_1 -\ \- c{T + c whose coefficients Cj G F, 
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are the reductions of Cj modulo p; this / G F p [T] is called the reduction 
of / modulo p. 

Now, although our polynomial / is irreducible by hypothesis, there may 
be some primes p modulo which its reduction / has n distinct roots. For 
example, if / = T 2 + 1 and p = h,_ then / = (T + 2) (T - 2) . More generally, 
we have / = (T + l) 2 if p — 2, / has two distinct roots if p = 1 (mod. 4) 
and / remains irreducible if p = — 1 (mod. 4). One sees this by remarking 
that, for odd p, a root x G F p of / is an order-4 element in the cyclic group 
Fp of order p — 1, so that x exists if and only if 4 | p — 1. This example 
goes back to Fermat. 

Take / = T 2 - T - 1 as the next example. If p = 5, then / = (T + 2) 2 . 
It can be checked that for p ^ 5, the polynomial / has two distinct roots 
if and only if p = ±1 (mod. 5), and that it is irreducible if and only if 
p = ±2 (mod. 5). 

We notice that for these two quadratic polynomials /, the primes p for 
which / has two distinct roots are specified by "congruence conditions" : by 
p= 1 (mod. 4) when/ = T 2 + l,byp = ±l (mod. 5) when / = T 2 -T-l. 

It can be shown that for any (monic, irreducible) quadratic polynomial 
f G Z[T], the primes p for which f G F p [T] has two distinct roots are given 
by certain congruence conditions modulo some number D/ depending on 
f . This statement (with a precise expression for D/ which we omit) is 
implied by the law of quadratic reciprocity, first proved by Gauss. The 
law in question says that for any two odd primes p ^ q, we have 

where, by definition, f - j = 1 if p G F^ is a square (if p = a 2 for some 

a G F*), and ( - J = — 1 if p G F^ is not a square. 

With the help of this law, the reader should be able to check that the 
reduction / (modulo p) of / = T 2 — 11 has two distinct roots if and only 
if, modulo 44, 

p G {1, 5, 7, 9, 19, 25, 35, 37, 39, 43}. 

(Incidentally, given any integer m > and any a G (Z/mZ) x , there are 
infinitely many primes p = a (mod. m) ; in a precise sense, the proportion 
of such primes is l/ip(m), as shown by Dirichlet.) 

The law of quadratic reciprocity can be formulated as an equality of 
two different kinds of L-functions, an "Artin L-function" and a "Hecke 



L-function" , both functions of a complex variable s. The first one carries 
information about the primes p modulo which the polynomial T 2 — q* 
(where q* = (— l)^ -1 ^ 2 ^, so that q* = 1 (mod. 4)) has two distinct roots, 
and is defined as 

L iW = Il — rr 
V i - (V 

where \\) = ( — 1) ~ 1 >' 8 and ( — ) = 0. The second one carries 
information about which primes p lie in which arithmetic progressions 
modulo q, and is defined as 

u(s) = \{ 
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where we put ( - j =0. The law of quadratic reciprocity (1) is equivalent 

to the statement that Li(s) = L 2 (s) (except possibly for the factor at the 
prime 2), as can be seen by comparing the coefficients of p~ s and noting 

that (f ) = (-I)Cp- 1 )/ 2 . 

What are the (monic, irreducible) degree-n polynomials / for which the 
primes p where the reduction / has n distinct roots in F p can be specified 
by similar congruence conditions ? Before characterising such polynomials, 
let us discuss one more example. 

For every prime /, consider the (unique) monic polynomial <&i G C[T] 
whose roots are precisely the / — 1 primitive /-th roots e 2l7Tk ' 1 (0 < k < I) 

of 1, namely $ z = T'" 1 + T l ~ 2 H + T + 1 ; notice that $ z e Z[T]. It can 

be shown (in much the same way as our discussion of T 2 + 1 above) that 
the reduction $^ modulo some prime p ^ I has / — 1 distinct roots in F p if 
and only if / 1 p — 1, or equivalently p = 1 (mod. I). 

More generally, for every integer m > 0, the primitive m-th roots of 1 
in C are £m> where (, m = e 2t7r / m and gcd(/c, m) = 1. If k! = k (mod. m), 
then (^ = Cm? so the number of such primitive roots is <f(m), the order of 
the group (Z/mZ) x (as gcd(k,m) = 1 if and only if k E (Z/mZ) x ). Let 
$ m G C[T] be the monic polynomial whose roots are precisely these <p(m) 
numbers Cm; where gcd(k,m) = 1, so that $4 = T 2 + 1. It can be shown 
that $ m G Z[T] and that it is irreducible; $ m is called the cyclotomic 
polynomial of level m. 

For which primes p does the reduction $ m have (p(m) distinct roots in 
F p ? Some work is required to answer this question, and it must have been 
first done by Kummer in the XIX th century, if not by Gauss before him. 



It turns out that the reduction $ m modulo p of the level-m cyclotomic 
polynomial $ m has <fi(m) = deg $ m distinct roots in F p if and only if 
p = 1 (mod. m). 

Now, for any monic irreducible polynomial / of degree n > 0, we can 
adjoin the n roots of / in C to Q to obtain a field K/. The dimension of 
K/ as a vector space over Q is finite (and divides n!). For example, when 
/ = T 2 + 1 and i G C is a root of /, the field K/ consists of all complex 
numbers x + iy such that i,|/GQ. When / = 3>i for some prime /, K/ 
consists of all z G C which can be written z = bo + b\Q + ■ ■ ■ + bi-2( L ~ 2 
for some bi G Q. 

The automorphisms of the field K/ form a group which we denote 
by Gal/ in honour of Galois. When / is quadratic, Gal/ is isomorphic 
to Z/2Z; when / = $ m is the cyclotomic polynomial of level m > 0, 
then Gal/ is canonically isomorphic to (Z/mZ) x . The group Gal/ is 
commutative in these two cases; we say that the polynomial / is abelian 
(in honour of Abel) if the group Gal/ is commutative. 

It has been shown that, f G Z[T] being an irreducible monic polynomial 
of degree n > 0, the set of primes p modulo which f has n distinct roots 
can be characterised by congruence conditions modulo some number D/ 
depending only on f if and only if the group Gal/ is commutative (as is 
for example the case when n = 2 or f = $ m for some m > 0). 

Visit http://mathoverflow.net/questions/11688 for a discussion of 
this equivalence ; the precise version of this statement is a consequence of 
the following beautiful theorem of Kronecker and Weber : For every abelian 
polynomial f , there is some integer m > such that K/ C K$ m ; every 

root of f can be written as a linear combination of 1, £ m , . . . , Cm with 

coefficients in Q. 

The generalisation of this theorem to all "global fields" constitutes 
"class field theory", which was developed in the first half of the XX th 
century by Hilbert, Furtwiingler, Takagi, Artin, Chevalley, Tate, . . . This 
theory is to abelian polynomials / what the quadratic reciprocity law is to 
quadratic polynomials over Q. As we saw above for the latter, class field 
theory can be formulated as the equality between an "Artin L-function" 
and a "Hecke L-function", the first one carrying information about the 
primes modulo which / splits completely and the second carrying informa- 
tion about which primes lie in which arithmetic progressions modulo D/. 

How about polynomials / which are not abelian, the ones for which 
the group Gal/ is not commutative? Such an /, namely / = T 3 — 2, 
was already considered by Gaufi. He proved that this / splits completely 
modulo a prime p ^ 2, 3 if and only if p = x 2 + 27y 2 for some 1,1/6 Z. 



For general /, how can we characterise the primes p modulo which / has 
n = deg / distinct roots ? The Langlands programme, initiated in the late 
60s, provides the only satisfactory, albeit conjectural, answer to this basic 
question (in addition to many other basic questions). This is what we 
would like to explain next. 

Denote by N p (/) the number of roots of / in F p , so that for the abelian 
polynomial / = T 2 — T — 1 we have Ns(/) = 1 and 

N m = / 2 ifp = ±1 ( mod - 5 )' 
pU) \0 ifp=±2(mod.5), 

as we saw above. It can be checked that N p (/) = 1 + a p for all primes p, 
where a n is the coefficient of q n in the formal power series 

q-q 2 -q 3 + q 4 2 3,4,6 7 8,9, 

; r = Q - q — q + q + q - q — q + q -\ 

1 — q° 

in the indeterminate q. We can be said to have found a "formula" for 
N P (T 2 — T — 1). Notice that the a n are strongly multiplicative in the sense 
that a mm f = a m a m > for all m > 0, m' > 0. 

It follows from class field theory that there are similar "formulae" or 
"reciprocity laws" for N p (/) for every abelian polynomial /. What about 
polynomials / for which Gal/ is not abelian? 

The fundamental insight of Langlands was that there is a "formula" for 
Np(/) for every polynomial /, abelian or not, and to say precisely what is 
meant by "formula" . We cannot enter into the details but content ourselves 
with providing some illustrative examples (without proof). I learnt the 
first one, which perhaps goes back to Hecke, from Emerton's answer to 
one of my questions (visit http://mathoverflow.net/questions/12382) 
and also from a paper of Serre [11]. 

Consider the polynomial / = T 3 — T — 1 which is not abelian ; the group 
Gal/ is isomorphic to the smallest group which is not commutative, namely 
the symmetric group ©3 of all permutations of three letters. Modulo 23, 
/ has a double root and a simple root, so N23(/) = 2. If a prime p 7^ 23 
is a square in F^ 3 , then p can be written either as x 2 + xy + 6y 2 or as 
2x 2 + xy + 3y 2 (but not both) for some x, y G Z ; we have N p (/) = 3 in 
the first case whereas N p (/) = in the second case. Finally, if a prime 
p 7^ 23 is not a square in F23, then N p (/) = 1. The smallest p for which 
N p (/) = 3 is 59 = 5 2 + 5.2 + 6.2 2 . 

It can be checked that for all primes p, we have N p (/) = 1 + o p , where 



a n is the coefficient of q n in the formal power series r^i 231 : 



+00 



q U(l- q k )(l- q ^)= q - q l- q 3 +q S + q 8- q ^- q ™+ q ™- q ^ + 



fc=l 



It follows that a p G {—1, 0, 2}, and a theorem of Chebotarev (generalising 
Dirichlet's theorem recalled above) implies that the proportion of p with 

a p = — 1, 0, 2 is 1/3, 1/2, 1/6 respectively. 

We thus have a "formula" for N P (T 3 — T — 1) similar in some sense to 
the one for N p (T 2 — T — 1) above. It is remarkable that a p = ^(B p — C p ) 
where B n , C n are defined by the identities 



+00 +00 

j>,y = J2 q x2+xy+6y \ Y, c rf= E Q 2x2+xy+3y2 . 

j=0 (s,2/)eZ 2 j=0 (x,y)6Z 2 



Even more remarkable is the fact that if we define a function of a complex 
variable r in S) = {x + iy G C | y > 0} by F(r) = X] n ^i «ne 2l7rT,n , then 

F is analytic and "highly symmetric" : for every matrix I J with 

a,b,c,d G Z, ad — 6c = 1, c = (mod. 23), so that in particular the 

ar + b 
imaginary part of is > 0, we have 

cr + a 



ar + b\ /^/^^t^ ( d\ ( +1 if d G F 2 X 3 2 

23 • 



F I^TdJ = (23j (CT + d)FM ' lav -l-i if^F 



These symmetries of F make it a "primitive eigenform of weight 1, level 23, 
and character (23)" : no mean achievement. This constitutes a "reciprocity 
law" for T 3 - T - 1. 

There are "reciprocity laws" even for some polynomials / G Z[S,T] 
in two indeterminates such as / = S 2 + S — T 3 + T 2 : there are nice 
"formulae" for the number N p (/) of zeros (s,t) G F 2 of / (the number 
of pairs (s,t) G F 2 satisfying s 2 + s — t 3 + t 2 = 0), and the sequence of 
these numbers (or rather the numbers a p = p — N p (/), which are in the 
interval [— 2^/p, +2^/p] by a theorem of Hasse) is "highly symmetric" as 
in the example of the polynomial T 3 — T — 1 above. Let me explain. 
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For our new / = S 2 + S — T 3 + T 2 , defining B n , C n by the identities 

+00 



\ "* g . _ j __ \ ^ n x A +xy+3y^+u^+uv+3v' : 



2 1 1 Q 2 1 2 1 1 Q 2 

q 

j=0 (x,y,u,v)eZ 4 

,0 , /.„! , A „1 , o„3 , on„4 , -, a „5 , QO „6 , 1 r - 7 



= 1q u + V + V + 8q + 20q 4 + 16q° + 32q° + 16q< + ■ ■ ■ 
+ V 1 + 64g 12 + 40q 13 + 64q 14 + 56q 15 + 68q w + 40q 17 + 



V^ n . n j — ^^ ^2(x 2 +y 2 +u 2 +u 2 )+2xM+xf;+yii-2yu 



+ 00 

^ q 

3=0 (x,y,u,v)eZ 4 

= lq° + Oq 1 + 12q 2 + 12q 3 + 12q 4 + 12q 5 + 24q 6 + 24q 7 + ■■■ 
+ Oq 11 + 72q 12 + 24q ls + 48q 14 + 60q 15 + 84q w + 48q 17 + ■■■ 

we have a p = |(B p — C p ) for every prime p 7^ f f . Amazing ! 

This "formula" may look somewhat different from the previous one but 
it is actually similar : \{B p — C p ) = c p for every prime p (and hence a p = c p 
for p y^ 11), where c n is the coefficient of q n in the formal product 

+00 

%mi> = « II (i - q k )H± - q llk ) 2 = + W + Y, c nq n - 

k—\ n>l 

We have already listed c p = |(B P — C p ) for p < 19 ; here is another sample : 



p = 


19 


23 


29 


31 


37 


41 • 


• ■ 1987 


1993 


1997 


1999 


c p 





-1 





7 


3 


-8 •■ 


• -22 


-66 


-72 


-20 



As in the case of T 3 — T — 1, if we put q = e 2l7rr (with r = x+iy and y > 0), 
we get an analytic function F(r) = X^n=i c n e 2j7rT ' n of r G S) which satisfies 

(ct + d) 2 F '(t) for every matrix I , I (a, 6, c, <i G Z) with 



cr + dj v 7 v ; \c d 

ad — be = 1 and c = (mod. 11). In addition, F has many other remarkable 
properties (such as c mm / = c m c m i if gcd(m, m') = 1, c p v = c p r-ic p —pc p r-2 
for primes p ^ 11 and r > 1, and enr = c^ for r > 0) giving it the elevated 
status of "a primitive eigenform of weight 2 and level 11". 

The analogy with the properties of the previous F is perfect, with 
c = (mod. 11) replacing c = (mod. 23) and (ct + d) 2 replacing 
(t^)(ct + d) in the expression for the value at (ar + b)/(cr + d). (There 
is a sense in which the prime 11 is "bad" for this / = S 2 + S — T 3 + T 2 , 



much as 2 is bad for T 2 + 1, 5 is bad for T 2 — T — 1, the prime divisors of 
m are bad for $ m , and 23 is bad for T 3 — T — 1.) 

The above example is taken from Langlands and Harder, but perhaps 
goes back to Eichler and implicitly to Hecke; what we have said about / 
(namely, a p = c p for all primes p ^ 11) is summarised by saying that "the 
elliptic curve (of conductor 11) defined by / = is modular" . It can also 
be summarised by saying that the "Artin L-function" 



Ms) = n i — 7— — 

-V^ 1 -a p .p s +p.p 



2.s 



(with an appropriate factor for the prime 11) is the same as the "Hecke 
L-function" L 2 (s) = J2 n>0 c n n~ s . 

There is a similar equality (up to factors at finitely many primes) 
of the Artin L-function Yl p (l — a p .p~ s + p.p _2s ) _1 of the polynomial 
/ = S 2 — T 3 + T, defined using the number of zeros N p = p — a p of / 
modulo various primes p, with the Hecke L-function J2 n >o c n n ~ s of 

^, 82 = q II( 1 - ^ 4fc ) 2 ( 1 - 1 8k f = ° + ! V + E c ^ n 

k-l n>l 

the function F(r) = Xl n >o c nC 2l7rr ' n corresponding to which enjoys the 
symmetries 

ar + b\ , „ 2 



F (^TdJ = (cT + d)F(T) 

for every t E S) (so r = x + iy with i,i/6Rj>0) and every matrix 
a b 



, , (a, 6, c, <i G Z), ad — 6c = 1, c = (mod. 32). 

As a final example, consider / = S 2 — T 3 — 1 with N p = p — a p points 
modulo p on the one hand, and 

v* = q]l(i- Q 6k ) 4 = o + 1 V + E c ^ n 

fc>0 n>l 

on the other, for which the function F(r) = X] n >o c n e 2l7rrn has the above 
symmetries with 32 replaced by 36. Each of these defines an L-function, 
the Artin L-function FT (1 — a p-P~ s +P-P~ 2s )~ 1 and the Hecke L-function 
J2 n >o c n n ~ s ■ Remarkably, they are the same (except for some adjustment 
at finitely many primes) ! 



Wiles and others (Taylor, Diamond, Conrad, Breuil) have proved that 
similar "formulae" and "symmetries" are valid — such equalities of Artin 
L-functions with Hecke L-functions are valid -- for each of the infinitely 
many f G Z[S,T] which define an "elliptic curve" (such as, among many 
others tabulated by Cremona, 

f = S 2 + S - T 3 + T, and f = S 2 + S - T 3 - T 2 + T + 1, 

for which the primes 37 and 101 are "bad" respectively) , thereby settling a 
conjecture of Shimura, Taniyama and Weil, and providing the first proof 
of Fermat's Last Theorem in the bargain. 

The precise version of this uninformative statement goes under the 
slogan "Every elliptic curve over Q is modular" and has been called 
"the theorem of the century" ; it relies on the previous work of many 
mathematicians in the second half of the XX th century, among them 
Langlands, Tunnell, Serre, Deligne, Fontaine, Mazur, Ribet, . . . 

The reciprocity law for abelian polynomials (class field theory, 1900- 
1940), the reciprocity law for the polynomial T 3 — T — 1 of group ©3, the 
modulariy of the "elliptic curve" S 2 + S — T 3 + T 2 =0 and more generally 
the modulariy of every elliptic curve defined over Q (1995-2000), and 
many other known reciprocity laws (Drinfeld, Laumon-Rapoport-Stuhler, 
Lafforgue, Harris-Taylor, Henniart) which we have not discussed, are all 
instances of the Langlands programme (1967 — hoo?). At its most basic 
level, it is a search for patterns in the sequence N p (/) for varying primes 
p and a fixed but arbitrary polynomial / with coefficients in Q. Our 
examples exhibit the "pattern" for some specific /. 

Confining ourselves to monic irreducible polynomials / G Z[T], Lang- 
lands predicts that there is a "reciprocity law" for / as soon as we give an 
embedding p : Gal/ — > GLd(C) of the group Gal/ into the group GLd(C) 
of square matrices with complex entries and determinant 7^ 0. (What was 
the embedding for / = T 3 — T — 1 ? It came from the unique irreducible 
representation of ©3 on C 2 .) Class field theory is basically the case d = 1 
of this vast programme. Essentially the only other known instances of the 
precise conjecture are for d = 2 and either the group p(Gal/) is solvable 
(Langlands-Tunnell) or the image p(c) of the element c G Gal/ which 

sends x + iy to x — iy is not of the form I J for any a G C x (Khare- 

Wintenberger-Kisin) . 

So what is a reciprocity law ? As the most basic level, it is the law 
governing the primes modulo which a given monic irreducible / G Z[T] 
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factors completely, such as the quadratic reciprocity law when / has 
degree 2, or class field theory when / is abelian. We can also think of 
a reciprocity law as telling us how many solutions a given system of 
polynomial equations with coefficients in Q has over the various prime 
fields F p . But we have seen that these laws can be expressed as an equality 
of an Artin L-function with a Hecke L-function, and that the modularity 
of elliptic curves over Q can also be expressed as a similar equality of L- 
functions. We may thus take the view that a reciprocity law is encapsulated 
in the equality of two L-functions initially defined in two quite different 
ways, Artin L-functions coming from galoisian representations and Hecke 
L-functions coming from automorphic represetations. 



The rest of this Note requires greater mathematical maturity. We ex- 
plain what kind of "reciprocity laws" Serre's conjecture provides, but pass 
in silence the recent proof of this conjecture by Khare and Wintenberger. 

For any finite galoisian extension K | Q and any prime p which does not 
divide the discriminant of K, we have the "element" Frob p G Gal(K|Q), 
only determined up to conjugation in that group. If f p is the order of 
Frobp, then p splits in K as a product of g p = [K; : Q]// p primes of K of 
residual degree / p , so that p splits completely if and only if Frob p = Mr. 
The extension K is uniquely determined by the set S(K) of primes which 
split completely in K. For example, if S(K) is the set of p = 1 (mod. m) 
for some given m > 0, then K = Q(Cm) 5 where Q m is a primitive m-th root 
of 1. Given a faithful representation of Gal(K|Q) in GLd(C), Langlands' 
programme characterises the subset S(K) in terms of certain "automorphic 
representations of GL^ of the adeles" . 

Serre's conjecture deals with faithful representations p of Gal(K|Q) into 
GL2(F;) which are odd in the sense that the image p(c) of the "complex 
conjugation" c G Gal(K|Q) has determinant —1. The oddity is automatic 
if / = 2 ; for odd /, it implies that K is totally imaginary. 

A rich source of such representations is provided by elliptic curves E over 
Q. For every prime /, we have the 2-dimensional F^-space E[Z] = ;E(Q) 
of /-torsion points of E together with a continuous linear action of the 
profinite group Gq = Gal(Q|Q). Adjoining the /-torsion of E to Q 
we get a finite galoisian extension Q(E[/]) which is unramified at every 
prime p prime to N/, where N is the conductor of E, and comes with an 
inclusion of groups Gal(Q(E[/])|Q) C AutF, (jE(Q)) (which is often an 
equality). Choosing an F^-isomorphism E[/] — ¥ F^, we obtain a faithful 
representation pe,z : Gal(Q(E[/])|Q) — >• GL 2 (F;) which is odd because 
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det pe,i is the mod-/ cyclotomic character. 

Given a finite galoisian extension K of Q and a faithful representation 
p : Gal(K|Q) — > GL 2 (F;) which is odd and irreducible (for the sake 
of simplicity), Serre defines two numbers k p , N p and conjectures that p 
"comes from a primitive eigenform of weight k p and level N p " . Instead of 
trying to explain this, let me illustrate it with the example of the elliptic 
curve E : y 2 + y = x 3 — x 2 which we have already encountered. 

This curve has good reduction at every prime p 7^ 11. Serre shows that 
the representation pe,i '■ Gal(Q(E[/])|Q) — )■ GL^Fj) is an isomorphism 
for every / 7^ 5. For every p 7^ 11,/, the characteristic polynomial of 
p E ,KFrob p ) G GL 2 (Fi) is 

x 2 -c p x + peF t [x] 



k\2/-i „llk\2 



where c n is the coefficient of q n in r/i2 11 2 = q Y\ k>0 (l — q ) (1 — q 
above. Recall that p splits completely in Q(E[/]) if and only if 

1 0' 



as 



PE,i(Frob p , , Q ;| 

which implies, but is not equivalent to, p, c p = 1, 2 (mod. /). For / = 7, the 
first ten p satisfying these congurences are 

113, 379, 701, 1051, 2437, 2521, 2731, 2857, 3221, 3613 ; 

none of them splits completely in Q(E[7]). Nevertheless, the representation 
Pe,i is explicit enough to determine the splitting of rational primes in 
Q(E[/]) ; the first ten such primes for / = 7 are 

4831, 22051, 78583, 125441, 129641, 147617, 153287, 173573, 195581, 

and 199501, as obligingly computed by Tim Dokchitser at my request. 
In summary, we have the following "reciprocity law" for Q(E[/]) : 

"p ^ 11,1 splits completely in Q(E[/]) " & u E p [l] C E p (F p ) ", 

where E p is the reduction of E modulo p. Indeed, reduction modulo p 
identifies E[/] with E P [Z] and the action of Frob p on the former F^-space 
with the action of the canonical generator ip p e Gal(F p |F p ) on the latter 
F^-space. To say that ip p acts trivially on E p [Z] is the same as saying that 
E p [Z] is contained in the F p -rational points of E p . The analogy with the 
multiplicative group p is perfect : 

u p ^ I splits completely in Q(p[l]) " <^> " p, p [l] C p p (F p ) " 
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(•£> / 1 p — 1 <^> p = 1 (mod./)), where /U p is not the p-torsion of p 
- that would be p,\p] - but the reduction of p modulo p, namely the 
multiplicative group over F p . 

With the proof by Khare and Wintenberger (2006-2009) of Serre's 
modularity conjecture (1973-1987), we can write down such reciprocity 
laws for every finite galoisian extension K|Q as soon as a faithful odd 
irreducible representation p : Gal(K|Q) — > GL^F;) is given. 

Sources. The reciprocity laws for quadratic and cyclotomic polyno- 
mials can be found in most textbooks on number theory; they are also 
treated at some length by Wyman [14]. An advanced introduction to class 
field theory is contained in the book Algebraic Number Theory [3] edited 
by Cassels and Frohlich (recently reissued by the London Mathematical 
Society with a long list of corrections, available on Buzzard's website). 

The polynomial T 3 — 2 is discussed by Cox [4]. I learnt the example 
T 3 — T — 1 from Emerton and later in a paper by Serre [11]. It is also 
discussed in an earlier paper [10], as is the polynomial T 3 + T — 1, for 
which the corresponding modular form is 

V^ x 2 +xy+8y 2 _ V^ 2x 2 +xy+4y 2 

v (x,y)6Z2 (x,y)eZ2 

He also mentions a different kind of example, given by the dihedral 
extension Q(v / T, v^12) of Q, for which the corresponding modular form is 

^ = a\{{l - q l2k f = J2 (-W W 

fc=l x,y=l,0(3),x+y=0(2) 

The elliptic curve E : y 2 + y = x 3 — x 2 and its associated modular form 
r]i2 U 2 are mentioned by Langlands (A little bit of number theory, unpub- 
lished but available on the website of the Institute for Advanced Study) , 
and discussed in his talk [9] at the Gibbs symposium (also available on 
the same website). It is also discussed by Harder [6] and available on the 
website of the International Centre for Theoretical Physics) , and by Zagier 
[15]. 

This is the curve (with a different defining equation) used by Shimura 
[12] to study reciprocity laws for Q(E[/]) for primes / G [7,97]. Serre 
showed (Inventiones 15) that pe,i is surjective for every / ^ 5 ; cf. the 
online notes on Serre's conjecture by Ribet and Stein. The other two 
elliptic curves, namely y 2 = x 3 — x and y 2 = x 3 + 1, of conductor 32 
and 36 respectively, are taken from a paper by Honda [7] . 
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Resources. In addition to the sources cited above, a number of articles 
providing an introduction to the Langlands Programme are freely available 
online. There is a very accessible account by Taylor in [13]. There are 
introductory accounts by Gelbart [5], Arthur [1], [2], Knapp [8], and the 
more informal essays by Arthur, Knapp and Rogawski in the Notices of 
the American Mathematical Society. Knapp also has a number of other 
related introductory texts on his website. For the more advanced reader, 
there is a book by Bump, Cogdell, de Shalit, Gaitsgory, Kowalski, and 
Kudla An introduction to the Langlands program, edited by Bernstein and 
Gelbart, Birkhuser (2003). 

Applications. Reciprocity laws are a source of intense pleasure for the 
mathematician; they are also immensely useful within mathematics. For 
the rest, Simon Singh says that "There are also important implications 
for the applied sciences and engineering. Whether it is modelling of the 
interactions between colliding quarks or discovering the most efficient way 
to organise a telecommunications network, often the key to the problem 
is performing a mathemtical calculation. In some areas of science and 
technology the complexity of the calculations is so immense that progress 
in the subject is severly hindered. If only mathematicians could prove 
the linking conjectures of the Langlands programme, then there would 
be shortcuts to solving real-world problems, as well as abstract ones" 
(Fermat's Last Theorem, p. 214). 

A final example. Let me end with another striking application of the 
Langlands programme : it allows us to prove some arithmetical statements 
which have a fairly elementary formulation but for which no other proof 
is available, elementary or otherwise. Let c n (n > 0) be the coefficient of 
q n in the formal product 

+oo 

k—\ n>\ 

In 1916, Ramanujan had made some deep conjectures about these c n ; 
some of them (such as c mm > = c m c m i if gcd(m, m') = 1 and 



Cpr — Cpi — 1 Cp p Cp 



r—1 



for r > 1 and primes p) were proved by Mordell in 1917 but the last 
of which was proved by Deligne only in the 70s : for every prime p, the 
number t p = c v j2p 11 '' 1 lies in the interval [—1, +1]. 



All these properties of the c n follow from the fact that the corresponding 

/n>0 ' 



function F(r) = J2 n>0 c n e 2l7rr ' n of r = x + iy (y > 0) in i) is a "primitive 
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eigenform of weight 12 and level 1" (which basically amounts to the 
identity F(— 1/r) = r 12 F(r)). Here are the first few c p (usually denoted 
r(p), but our t is in ft) computed by Ramanujan : 



p = 


2 


3 


5 


7 


11 


13 


17 ••• 


Cp — 


-24 


252 


4830 


-16744 


534612 


-577738 


-6905934 • • • 



(Incidentally, Ramanujan had also conjectured some congruences satisfied 
by the c p modulo 2 11 , 3 7 , 5 3 , 7, 23 and 691, such as c p = 1+p 11 (mod. 691) 
for every prime p ; they were at the origin of Serre's conjecture mentioned 
above.) 

We may therefore ask how these t p = Cp/2p n / 2 are distributed : for 
example are there as many primes p with t p G [—1, 0] as with t p G [0, +1] ? 
Sato and Tate predicted in the 60s that the precise proportion of primes 
p for which t p G [a, 6], for given a < b in [—1, +1], is 

2 <- h 



'\ — x 2 dx. 

This is expressed by saying that the t p = c P l2p X1 ' 2 are equidistributed 
in the interval [— 1,+1] with respect to the measure (2/7r)\/l — x 2 dx. 
Recently Barnet-Lamb, Geraghty, Harris and Taylor have proved that such 
is indeed the case. 

Their main theorem implies many such equidistribution results; for 
example, going back to the equation S 2 + S = T 3 — T 2 , which has p — a p 
solutions in F 2 , where a p is the coefficient of q p in 7/12 ;11 2 for every prime 
p 7^ 11, the numbers a p /2 v /p, which lie in [—1, +1], are equidistributed in 
this interval with respect to the same measure. See [13] for an introduction 
to such density theorems. 

Acknowledgments. I heartily thank Tim Dokchitser for computing 
the first ten primes which split completely in Q(E[7]), and my colleague 
Rajesh Gopakumar for a careful reading of the text. 
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